Risk Management

Risk management is the process of measuring risk and developing strategies to minimize, control and eliminate that risk. It is summed up very well by ISO 31000 as “the effect of uncertainty on objectives.” When a risk is deemed unacceptable, businesses use a range of tactics in order to mitigate and manage that risk. These include:

Risk assumption: Absorbing minor losses to protect against large ones.

Risk avoidance: If a company can’t eliminate all risks, they seek to avoid or deflect as many risks as possible.

Risk retention: If the risk is determined worth the reward, a company may decide to accept the risk and plan for fallout.